CVE-2013-10070

This Metasploit module exploits a PHP code execution vulnerability in php-Charts v1.0 by injecting arbitrary PHP code via the 'url.php' script, which uses eval() on user-controlled HTTP GET parameters. The exploit sends a base64-encoded payload to achieve remote command execution.

This exploit demonstrates PHP code execution in php-chart_v1.0 via unsafe use of eval() on user-controlled input. The vulnerability allows arbitrary code execution by injecting PHP code into GET parameters, which are then evaluated.

This Metasploit module exploits a PHP code execution vulnerability in php-Charts v1.0 by injecting arbitrary PHP code via the 'url.php' script, which calls eval() with user-controlled data from HTTP GET parameters. The exploit sends a base64-encoded payload that is decoded and executed on the target system.